Extracted

• • Target
    3de7e47b03cdc4fee7653123c6ed6743.exe
  • Size 303KB
  • SHA256 7becab35b4300ad3c0be8e7dc12f311b140cb8a7b5338e0102fcf6f71c97157d
  • MD5 3de7e47b03cdc4fee7653123c6ed6743
  • SHA1 d9b52c165d6f49d6cacd0b2fbff24bac650045c7
  • SHA512 bca7a0807b5ffb56e1c34440d56eaaa1bbdb0ffdb0361cc0791903a7c86ab847259b6b66838055b0b43fa646d93479b4b64925552a37614bbfcffe29a516c695
  • SSDEEP 6144:SgPvEbLJgiVdk76cor9EwZ17TFjdXBVFbINOPCOsir:SgPvEbKirk74rlZ11pXBVFbIM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinezaurdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2